Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: F2pqR7mNnF8aupqvAsqTGVRl+9ujPwUpT20Ml3wwh9w=
Subject key identifier: F8:77:AB:3C:3F:1C:54:6D:2B:23:5C:2B:4C:39:40:13:A7:A9:68:B6
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 01A0D0EDF3F404A8EAF1DB5CA69F84354975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 01:00:50 +0000
Manifest this update: Thu 24 Sep 2026 01:00:50 +0000
Manifest next update: Fri 25 Sep 2026 01:00:50 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: IYB75o0XWoX3qXyxr7i5TCSdrMYRiv0on3im5FZTv2M=)
2: F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa (hash: 4XFHQlUZw+5vTRxUTYeT4+YjnJnMJyoXfBSAScrWHnE=)
3: vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa (hash: VDAC21VKqXFo8f4kpCzGmv5zrcQUyhDkUhgQDzFTnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:f3:f4:04:a8:ea:f1:db:5c:a6:9f:84:35:49:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Sep 24 01:00:50 2026 GMT
Not After : Sep 25 01:00:50 2026 GMT
Subject: CN=f877ab3c3f1c546d2b235c2b4c394013a7a968b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:99:2f:ef:4b:52:5a:85:4c:47:41:70:ec:
f4:b7:34:37:4b:57:5c:c4:4f:e5:a4:fa:99:4c:d1:
7c:b0:c7:58:03:08:d2:b2:cc:b1:d5:e3:e9:ed:3a:
19:08:d8:8f:75:10:60:52:00:2e:ae:b2:44:28:9c:
a8:3d:af:16:a4:89:bd:b6:5d:5c:0c:51:8a:b2:d8:
57:fb:6a:d8:e9:49:38:f2:04:93:96:a4:43:c3:a5:
8a:28:f4:b5:79:b4:f2:7e:65:00:38:df:cd:f6:8e:
66:c5:19:a1:77:ab:d8:dc:4a:49:86:20:59:fc:fc:
a8:97:8f:d7:d9:20:af:e2:76:1b:87:4b:20:69:6e:
30:a0:cc:06:6c:ad:4e:1f:f0:55:dd:19:c1:99:de:
1b:f3:5a:a3:92:1e:a2:88:47:ed:cb:73:33:03:21:
a3:ab:fd:44:dd:8e:22:0b:90:0d:51:7f:ac:1a:a5:
ce:94:ab:8e:48:7c:a1:35:e9:46:01:a9:03:b3:ab:
6e:f9:43:ba:99:07:b4:58:dc:df:29:0d:5a:3e:2e:
fa:7c:73:06:fb:22:28:cd:40:2c:f1:0e:0b:c3:92:
68:56:cc:41:66:04:46:59:e0:06:05:78:5f:cb:0e:
03:02:17:b8:0f:56:5b:56:eb:78:fd:3b:d5:70:78:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:77:AB:3C:3F:1C:54:6D:2B:23:5C:2B:4C:39:40:13:A7:A9:68:B6
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3f:cb:81:21:12:c1:8f:6a:dc:5e:98:1e:bc:f0:4d:12:ad:
3d:d2:ee:f1:14:03:98:2d:8a:26:d3:cf:67:87:8d:1d:34:45:
69:56:5b:33:c4:08:44:c3:59:59:28:40:14:48:13:0e:bd:fd:
ca:f7:67:12:33:57:76:cf:1e:87:6e:b6:68:bf:bc:f6:05:67:
5d:08:af:bc:2c:49:8e:91:31:7f:f7:ba:ef:36:60:0c:42:96:
ae:a3:66:a7:b5:e5:90:76:4c:50:fd:b7:d1:f1:6b:b6:2c:66:
33:f0:a8:55:ed:52:7b:74:da:53:7a:9b:0b:94:c7:ed:0d:7e:
32:af:b2:68:86:4c:46:83:40:7c:72:9a:91:8b:7d:3d:9c:12:
2a:92:06:77:ea:0e:46:73:ef:c0:d5:b3:c7:c6:e8:ba:1d:96:
3f:44:41:be:c2:6f:24:3a:2e:1d:0d:be:51:b8:a2:ed:ae:9a:
18:d9:3e:5b:2d:71:13:1e:c7:04:99:80:18:d1:f0:44:b2:0f:
5c:86:39:71:37:26:79:50:87:ce:cb:c2:27:98:2f:67:25:45:
58:af:49:56:8d:4e:a7:7e:f8:b6:7f:15:20:ec:46:30:b2:ff:
85:31:5d:f1:1e:e9:96:1e:69:ab:2f:a0:fc:2e:c1:22:0d:f6:
7d:67:de:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7fP0BKjq8dtcpp+ENUl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZTEwMTliYmUxMWI1NTExNDg3NGM5NjE3MTZlYjIzOGEx
MWNkNGUwHhcNMjYwOTI0MDEwMDUwWhcNMjYwOTI1MDEwMDUwWjAzMTEwLwYDVQQD
EyhmODc3YWIzYzNmMWM1NDZkMmIyMzVjMmI0YzM5NDAxM2E3YTk2OGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNWZL+9LUlqFTEdBcOz0tzQ3S1dc
xE/lpPqZTNF8sMdYAwjSssyx1ePp7ToZCNiPdRBgUgAurrJEKJyoPa8WpIm9tl1c
DFGKsthX+2rY6Uk48gSTlqRDw6WKKPS1ebTyfmUAON/N9o5mxRmhd6vY3EpJhiBZ
/Pyol4/X2SCv4nYbh0sgaW4woMwGbK1OH/BV3RnBmd4b81qjkh6iiEfty3MzAyGj
q/1E3Y4iC5ANUX+sGqXOlKuOSHyhNelGAakDs6tu+UO6mQe0WNzfKQ1aPi76fHMG
+yIozUAs8Q4Lw5JoVsxBZgRGWeAGBXhfyw4DAhe4D1ZbVut4/TvVcHg0gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPh3qzw/HFRtKyNcK0w5QBOnqWi2MB8GA1UdIwQY
MBaAFNnhAZu+EbVRFIdMlhcW6yOKEc1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2It
NDUyNTYxOTM1MDMxLzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2ItNDUyNTYxOTM1MDMx
LzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATD/LgSES
wY9q3F6YHrzwTRKtPdLu8RQDmC2KJtPPZ4eNHTRFaVZbM8QIRMNZWShAFEgTDr39
yvdnEjNXds8eh262aL+89gVnXQivvCxJjpExf/e67zZgDEKWrqNmp7XlkHZMUP23
0fFrtixmM/CoVe1Se3TaU3qbC5TH7Q1+Mq+yaIZMRoNAfHKakYt9PZwSKpIGd+oO
RnPvwNWzx8bouh2WP0RBvsJvJDouHQ2+Ubii7a6aGNk+Wy1xEx7HBJmAGNHwRLIP
XIY5cTcmeVCHzsvCJ5gvZyVFWK9JVo1Op374tn8VIOxGMLL/hTFd8R7plh5pqy+g
/C7BIg32fWfebg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:49:23 2026 by rpki-client